$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa File: 7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa (raw, json) Hash identifier: ZLZo5YIpFrXKIgVCeyRA88DeZfJrLlm4hRZWYXY1M2w= Subject key identifier: F3:05:A5:DA:41:8E:09:90:E9:B7:36:9D:0D:B4:16:B0:95:27:E2:17 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584A9900CF0A23A0692FD4EA44C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 20.149.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cf:0a:23:a0:69:2f:d4:ea:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=9e7c0735-6663-40d2-9b82-53cabba8acc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:d0:52:ea:4e:5d:c3:25:69:a7:7a:f6:e5: dd:b6:9d:be:4e:b3:da:7d:cf:6c:0a:d2:6e:16:a7: a8:ac:85:5a:87:40:ea:0c:db:2b:8a:c2:71:7c:5e: 3f:7c:ef:90:2f:d4:22:3d:54:b0:dd:94:eb:cf:0b: bb:7f:03:67:49:ff:2b:6a:6b:4b:4c:c6:20:50:f9: 49:13:fb:a3:9d:5c:d3:aa:d7:2f:41:0b:c6:5c:34: ae:66:bd:01:6c:d2:09:18:03:77:ca:86:7f:14:22: 0f:9e:b6:61:77:15:31:41:e5:44:35:eb:fa:ed:94: 67:40:8f:37:3e:b6:7f:08:3f:38:cd:56:0a:c7:ea: 1c:b9:b5:4a:e9:8b:b4:aa:36:78:8c:6a:8f:e6:82: a7:00:47:25:36:dd:65:c1:f7:bb:bd:50:03:37:bf: 7e:fa:a3:38:7e:08:3e:c2:02:93:e4:f9:fd:d5:46: 5a:53:e2:ff:15:79:88:00:f7:b2:c5:bb:52:40:de: e0:e4:a2:93:a5:1b:e2:1f:36:ca:5d:63:9c:c3:d7: 2a:e5:e9:e1:bf:19:b3:0d:7f:a8:68:b6:56:b6:21: 6e:94:0e:61:eb:3b:02:76:3b:fd:c9:44:6b:73:17: bb:ca:4b:ed:a7:35:9b:2c:b7:c8:91:7f:31:9f:2c: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:A5:DA:41:8E:09:90:E9:B7:36:9D:0D:B4:16:B0:95:27:E2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7da8b6d5-b9b5-3604-89eb-7a990fd76858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5b:ae:77:5f:e8:4d:f6:7d:90:69:dc:12:ce:68:a5:76:ab: ab:d4:0f:cb:b8:91:67:28:70:a9:a7:52:1b:15:24:ff:1f:ce: 0e:26:f0:6f:30:aa:c4:6f:47:d7:fa:6c:cd:1c:c7:1e:1b:38: a1:1c:fb:5c:24:32:dc:a4:f7:1c:de:c1:77:0e:64:f6:a6:aa: c4:8e:c6:f4:5c:04:df:d5:50:f9:ab:8c:41:be:26:ff:4e:42: 88:6a:de:c5:72:34:b1:e1:df:39:ba:ca:ad:2b:1d:e0:65:d1: ea:65:ca:e0:84:e4:f4:8b:fb:4d:2e:f9:da:70:7e:51:56:b3: 49:70:20:b5:5b:a7:65:7e:5a:34:0b:85:b2:cb:16:57:3f:7c: 96:1b:d6:6e:8a:87:35:6c:2f:64:f6:89:b6:ad:ef:93:72:25: 92:dd:dc:7b:fe:17:ad:fe:96:a0:58:ae:ad:43:d2:b4:d7:eb: ea:9d:ae:54:65:9b:da:aa:8c:18:9b:02:44:08:82:88:ce:b1: 7c:99:61:42:dc:8b:71:11:1e:4b:1e:6d:1a:42:27:9a:bc:4f: 13:70:d6:c2:e0:90:76:43:d7:4d:96:38:d8:4b:c4:57:24:55: 76:22:ca:97:7f:ea:00:ed:63:3c:bf:80:5e:21:1a:1a:c7:1a: 56:ed:06:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM8KI6BpL9TqRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk OWU3YzA3MzUtNjY2My00MGQyLTliODItNTNjYWJiYThhY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpvQUupOXcMlaad69uXdtp2+TrPafc9sCtJu FqeorIVah0DqDNsrisJxfF4/fO+QL9QiPVSw3ZTrzwu7fwNnSf8ramtLTMYgUPlJ E/ujnVzTqtcvQQvGXDSuZr0BbNIJGAN3yoZ/FCIPnrZhdxUxQeVENev67ZRnQI83 PrZ/CD84zVYKx+ocubVK6Yu0qjZ4jGqP5oKnAEclNt1lwfe7vVADN79++qM4fgg+ wgKT5Pn91UZaU+L/FXmIAPeyxbtSQN7g5KKTpRviHzbKXWOcw9cq5enhvxmzDX+o aLZWtiFulA5h6zsCdjv9yURrcxe7ykvtpzWbLLfIkX8xnyx6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMFpdpBjgmQ6bc2nQ20FrCVJ+IXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2RhOGI2ZDUtYjliNS0z NjA0LTg5ZWItN2E5OTBmZDc2ODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1brndf6E32fZBp3BLOaKV2q6vUD8u4kWcocKmnUhsVJP8fzg4m8G8w qsRvR9f6bM0cxx4bOKEc+1wkMtyk9xzewXcOZPamqsSOxvRcBN/VUPmrjEG+Jv9O Qohq3sVyNLHh3zm6yq0rHeBl0eplyuCE5PSL+00u+dpwflFWs0lwILVbp2V+WjQL hbLLFlc/fJYb1m6KhzVsL2T2ibat75NyJZLd3Hv+F63+lqBYrq1D0rTX6+qdrlRl m9qqjBibAkQIgojOsXyZYULci3ERHksebRpCJ5q8TxNw1sLgkHZD102WONhLxFck VXYiypd/6gDtYzy/gF4hGhrHGlbtBv8= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:17 2025 by rpki-client